$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a69b229e-9f26-3b8c-a52d-99a6562a92c4.roa File: a69b229e-9f26-3b8c-a52d-99a6562a92c4.roa (raw, json) Hash identifier: 6RuNEslTWtFgcWims4R5xyHs4mHIv4JNFYFHtQlE+Ms= Subject key identifier: 75:7B:AC:00:35:C9:F7:D4:C7:D9:DA:F3:1A:4C:C3:E8:54:A6:A6:F8 Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584A23C007BDDCFD1E8C29A98400 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a69b229e-9f26-3b8c-a52d-99a6562a92c4.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 13807 IP address blocks: 24.51.32.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:07:bd:dc:fd:1e:8c:29:a9:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=3ac2e040-4de4-4ea5-b83b-5cdf4adf6edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8b:37:45:2e:f7:2b:f3:47:9e:9c:f1:bc:de: 67:73:49:14:e0:ca:d8:ce:4a:70:a9:9f:77:3c:04: 61:d7:c8:b1:90:e3:0a:56:e3:5d:a8:05:02:63:31: 4c:4b:20:5b:19:2c:ff:65:ee:fc:3a:1d:c7:d1:fb: a4:06:35:e7:17:bb:3f:cf:4d:8c:23:a1:c2:01:55: ab:8d:e9:29:93:3a:6c:58:92:b2:7a:f2:69:a2:95: cc:a4:3c:c3:c7:94:5d:b3:55:cf:2b:d8:07:f9:11: bb:d7:b4:57:1b:83:6a:ce:cc:42:e2:3b:42:40:2b: 53:ff:a0:28:3b:c3:58:9f:ac:5e:f8:96:6f:85:2c: 1f:ba:8c:29:42:ac:93:0c:ed:35:95:64:a7:e8:96: cd:23:29:f1:b2:1c:aa:84:d7:5f:9f:e8:e6:31:be: 40:5b:9c:84:d6:3a:87:ad:db:60:0f:cc:3f:20:71: 47:0e:d0:80:0d:ea:ea:64:d3:4a:5f:f8:e5:8f:21: 6b:e0:da:30:08:c5:43:34:46:17:ee:eb:70:33:77: f7:5c:d2:0d:24:df:b6:f2:be:2b:38:dd:7b:7a:6d: 4c:78:20:7b:5a:1b:d0:26:95:db:b4:62:13:e2:e7: 4f:94:bb:3e:3d:d9:c2:e4:ac:39:ad:ec:b9:cc:cc: e3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7B:AC:00:35:C9:F7:D4:C7:D9:DA:F3:1A:4C:C3:E8:54:A6:A6:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a69b229e-9f26-3b8c-a52d-99a6562a92c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 24.51.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:1c:7c:96:a8:db:3a:71:6d:70:fd:0d:87:21:93:92:64:00: 49:32:01:d8:21:20:4b:af:56:81:57:a3:07:be:15:53:0a:69: e2:39:87:f6:f1:21:2f:7c:f8:4e:c2:41:f9:40:88:b4:a4:14: 52:43:a8:9e:92:fa:0b:f0:ed:02:72:94:93:06:12:4f:0d:46: 1f:e0:82:bc:fb:f0:8a:da:04:f2:cd:df:2c:ac:b9:d8:75:c9: 2b:5d:23:e1:6e:02:39:9a:43:eb:19:93:3f:51:5a:80:c3:a5: 37:78:a8:14:6d:d5:f4:54:44:6f:3c:fe:d0:74:3a:ef:b7:65: a8:a8:00:86:c9:c0:94:ed:02:e7:e8:03:d5:2c:8d:cb:9c:e7: cf:9a:bf:00:e8:38:31:05:ce:20:74:7e:25:c7:90:1e:2a:6c: fa:bf:17:00:fc:28:ec:47:c9:4f:b0:09:3f:7f:69:b5:5e:05: 13:95:18:3f:8f:a2:0a:09:9f:d9:10:a4:ff:66:a2:53:8a:36: 78:77:79:44:aa:c4:71:ec:cc:83:04:9c:6f:20:1f:fe:d1:ba: 24:6b:ff:6a:18:8f:45:63:27:4a:6a:c7:21:70:ad:34:45:c6: 5d:e2:7e:ba:17:64:b7:47:24:59:d0:21:52:e7:66:24:cb:76: f9:13:56:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwAe93P0ejCmphAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk M2FjMmUwNDAtNGRlNC00ZWE1LWI4M2ItNWNkZjRhZGY2ZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYs3RS73K/NHnpzxvN5nc0kU4MrYzkpwqZ93 PARh18ixkOMKVuNdqAUCYzFMSyBbGSz/Ze78Oh3H0fukBjXnF7s/z02MI6HCAVWr jekpkzpsWJKyevJpopXMpDzDx5Rds1XPK9gH+RG717RXG4NqzsxC4jtCQCtT/6Ao O8NYn6xe+JZvhSwfuowpQqyTDO01lWSn6JbNIynxshyqhNdfn+jmMb5AW5yE1jqH rdtgD8w/IHFHDtCADerqZNNKX/jljyFr4NowCMVDNEYX7utwM3f3XNINJN+28r4r ON17em1MeCB7WhvQJpXbtGIT4udPlLs+PdnC5Kw5rey5zMzj6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHV7rAA1yffUx9na8xpMw+hUpqb4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvYTY5YjIyOWUtOWYyNi0z YjhjLWE1MmQtOTlhNjU2MmE5MmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGDMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEcfJao2zpxbXD9DYchk5JkAEkyAdghIEuvVoFXowe+FVMKaeI5h/bx IS98+E7CQflAiLSkFFJDqJ6S+gvw7QJylJMGEk8NRh/ggrz78IraBPLN3yysudh1 yStdI+FuAjmaQ+sZkz9RWoDDpTd4qBRt1fRURG88/tB0Ou+3ZaioAIbJwJTtAufo A9Usjcuc58+avwDoODEFziB0fiXHkB4qbPq/FwD8KOxHyU+wCT9/abVeBROVGD+P ogoJn9kQpP9molOKNnh3eUSqxHHszIMEnG8gH/7RuiRr/2oYj0VjJ0pqxyFwrTRF xl3ifroXZLdHJFnQIVLnZiTLdvkTVjI= -----END CERTIFICATE-----Generated at Tue Jul 1 11:40:31 2025 by rpki-client